<% if @comment -%>
# <%= @comment %>
<% end -%>
<% @allowed_env_variables.each do |env_variable| -%>
Defaults!<%= command %> env_keep+=<%= env_variable %>
<% end -%>
<%= @user_spec %> <%= host %>=(<%= run_as %>)<%= nopasswd %> <%= command %>
